All Apps and Add-ons

DBConnect output to distributed indexers

jamesoconnell
Path Finder

I am struggling getting the output of my dbx application to send to distributed/load-balanced indexers. I can get output to go to a locally defined index fine, but am unable to get it output to distributed ones.

Can someone provide me with specific configuration to do this please?

Regards,
-James O'Connell

0 Karma
1 Solution

gfuente
Motivator

Hello

You just need to configure your outputs.conf to send data to the indexers, as you would do with a regular universal forwarder

Regards

View solution in original post

0 Karma

gfuente
Motivator

Hello

You just need to configure your outputs.conf to send data to the indexers, as you would do with a regular universal forwarder

Regards

0 Karma

jamesoconnell
Path Finder

Thank you. It works now. I was not using the listening port, but rather the HTTP port in my outputs.conf.

cheers.

0 Karma
Get Updates on the Splunk Community!

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...

Splunk APM: New Product Features + Community Office Hours Recap!

Howdy Splunk Community! Over the past few months, we’ve had a lot going on in the world of Splunk Application ...

Index This | Forward, I’m heavy; backward, I’m not. What am I?

April 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...